General

  • Target

    f5516060de8f0a33a93b04a916633224_JaffaCakes118

  • Size

    159KB

  • Sample

    241215-xnvvgatjf1

  • MD5

    f5516060de8f0a33a93b04a916633224

  • SHA1

    f3dff2077ca4759d10f744f6e624398eb6265697

  • SHA256

    3a5b2558943eb0f4aa80478fb8c772170886fa722e31a4bb270d189c7ac8d3b9

  • SHA512

    41cd575a462f52c5b9294ecd9d0f73662b9f008063acddd079bd338880b61df15a8269cd5340ac97e2ffee0c53d383e320f226e8a7419f81c068b3314e947976

  • SSDEEP

    3072:iXykspEaSyfkMY+BES09JXAnyrZalI+YQ:ifspnXsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      f5516060de8f0a33a93b04a916633224_JaffaCakes118

    • Size

      159KB

    • MD5

      f5516060de8f0a33a93b04a916633224

    • SHA1

      f3dff2077ca4759d10f744f6e624398eb6265697

    • SHA256

      3a5b2558943eb0f4aa80478fb8c772170886fa722e31a4bb270d189c7ac8d3b9

    • SHA512

      41cd575a462f52c5b9294ecd9d0f73662b9f008063acddd079bd338880b61df15a8269cd5340ac97e2ffee0c53d383e320f226e8a7419f81c068b3314e947976

    • SSDEEP

      3072:iXykspEaSyfkMY+BES09JXAnyrZalI+YQ:ifspnXsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks